osquery_tables_graph icon indicating copy to clipboard operation
osquery_tables_graph copied to clipboard

Repository containing Jupyter Notebooks for working with OSQuery tables and data

Untangling the Osquery❓ tables web🕸 using Jupyter Notebooks📓 Repository

This repository is used to hold Jupyter Notebooks that are used to work with Osquery tables and data.
This repository is also used to support https://sevickson.github.io/ with data for sharing in blogs.

OSQuery-Tables-interactive_Jupyterthon is a Jupyter Notebook I created for a talk I gave at Infosec Jupyterthon!


At this moment I have the following to-dos for the OSQuery-Tables Notebook:

  • [ ] Create graphs and shortest path functions for Linux, macOS and FreeBSD.
  • [ ] Check the data returned from the tables when querying and use that data to further fine-tune the filtering.
  • [ ] Not all shortest paths are correct, data in the columns do not match, maybe use the same data as previous bullet to build correct paths.
  • [ ] Make it possible to use other column names to create graphs with, maybe based on same returned data from a query.